♻️ bump sync-server dependencies (actualbudget#5497)

* bcrypt 5.0.2 -> 6.0.0

* supertest 6.3.4 -> 7.1.4

* pluggy-sdk 0.70.1 -> 0.74.0

* types

* better-sqlite3 11.10.0 -> 12.2.0

* express-rate-limit 7.5.0 -> 8.0.1

* babel/core 7.27.1 -> 7.28.0

* typescript 5.8.3 -> 5.9.2

* node types

* note

* typechecker

Author: matt-fidd

package.json

@@ -54,7 +54,7 @@
   },
   "devDependencies": {
     "@octokit/rest": "^22.0.0",
-    "@types/node": "^22.15.18",
+    "@types/node": "^22.17.0",
     "@types/prompts": "^2.4.9",
     "@typescript-eslint/parser": "^8.32.1",
     "cross-env": "^7.0.3",
@@ -78,7 +78,7 @@
     "prompts": "^2.4.2",
     "source-map-support": "^0.5.21",
     "ts-node": "^10.9.2",
-    "typescript": "^5.8.3",
+    "typescript": "^5.9.2",
     "typescript-eslint": "^8.32.1",
     "typescript-strict-plugin": "^2.4.4"
   },

packages/api/package.json

@@ -24,14 +24,14 @@
   },
   "dependencies": {
     "@actual-app/crdt": "workspace:^",
-    "better-sqlite3": "^11.10.0",
+    "better-sqlite3": "^12.2.0",
     "compare-versions": "^6.1.1",
     "node-fetch": "^3.3.2",
     "uuid": "^11.1.0"
   },
   "devDependencies": {
     "tsc-alias": "^1.8.16",
-    "typescript": "^5.8.3",
+    "typescript": "^5.9.2",
     "vitest": "^3.2.4"
   }
 }

packages/crdt/package.json

@@ -23,7 +23,7 @@
     "@types/google-protobuf": "^3.15.12",
     "protoc-gen-js": "^3.21.4-4",
     "ts-protoc-gen": "^0.15.0",
-    "typescript": "^5.8.3",
+    "typescript": "^5.9.2",
     "vitest": "^3.2.4"
   }
 }

packages/desktop-electron/package.json

@@ -90,7 +90,7 @@
   },
   "dependencies": {
     "@actual-app/sync-server": "workspace:*",
-    "better-sqlite3": "^11.10.0",
+    "better-sqlite3": "^12.2.0",
     "fs-extra": "^11.3.0",
     "promise-retry": "^2.0.1"
   },
@@ -104,6 +104,6 @@
     "cross-env": "^7.0.3",
     "electron": "30.5.1",
     "electron-builder": "24.13.3",
-    "typescript": "^5.8.3"
+    "typescript": "^5.9.2"
   }
 }

packages/loot-core/package.json

@@ -24,7 +24,7 @@
     "@rschedule/standard-date-adapter": "^1.5.0",
     "absurd-sql": "0.0.54",
     "adm-zip": "patch:adm-zip@npm%3A0.5.16#~/.yarn/patches/adm-zip-npm-0.5.16-4556fea098.patch",
-    "better-sqlite3": "^11.10.0",
+    "better-sqlite3": "^12.2.0",
     "csv-parse": "^5.6.0",
     "csv-stringify": "^6.5.2",
     "date-fns": "^4.1.0",
@@ -48,7 +48,7 @@
     "@types/better-sqlite3": "^7.6.13",
     "@types/emscripten": "^1.40.1",
     "@types/jlongster__sql.js": "npm:@types/sql.js@latest",
-    "@types/node": "^22.15.18",
+    "@types/node": "^22.17.0",
     "@types/pegjs": "^0.10.6",
     "@types/webpack": "^5.28.5",
     "@types/webpack-bundle-analyzer": "^4.7.0",
@@ -72,7 +72,7 @@
     "swc-loader": "^0.2.6",
     "terser-webpack-plugin": "^5.3.14",
     "ts-node": "^10.9.2",
-    "typescript": "^5.8.3",
+    "typescript": "^5.9.2",
     "vite-plugin-peggy-loader": "^2.0.1",
     "vitest": "^3.2.4",
     "webpack": "^5.99.8",

packages/loot-core/src/mocks/util.ts

@@ -68,7 +68,7 @@ export function patchFetchForSqlJS(baseURL: string) {
   vi.spyOn(global, 'fetch').mockImplementation(
     async (url: string | URL | Request) => {
       if (typeof url === 'string' && url.startsWith(baseURL)) {
-        return new Response(await fs.readFile(url), {
+        return new Response(new Uint8Array(await fs.readFile(url)), {
           status: 200,
           statusText: 'OK',
           headers: {

packages/sync-server/package.json

@@ -29,40 +29,40 @@
   "dependencies": {
     "@actual-app/crdt": "2.1.0",
     "@actual-app/web": "workspace:*",
-    "bcrypt": "^5.1.1",
-    "better-sqlite3": "^11.10.0",
+    "bcrypt": "^6.0.0",
+    "better-sqlite3": "^12.2.0",
     "convict": "^6.2.4",
     "cors": "^2.8.5",
     "date-fns": "^4.1.0",
     "debug": "^4.4.1",
     "express": "5.1.0",
-    "express-rate-limit": "^7.5.0",
+    "express-rate-limit": "^8.0.1",
     "express-winston": "^4.2.0",
     "jws": "^4.0.0",
     "migrate": "^2.1.0",
     "nordigen-node": "^1.4.1",
     "openid-client": "^5.7.1",
-    "pluggy-sdk": "^0.70.1",
+    "pluggy-sdk": "^0.74.0",
     "uuid": "^11.1.0",
     "winston": "^3.17.0"
   },
   "devDependencies": {
-    "@babel/core": "^7.27.1",
+    "@babel/core": "^7.28.0",
     "@babel/preset-typescript": "^7.27.1",
     "@types/babel__core": "^7",
-    "@types/bcrypt": "^5.0.2",
+    "@types/bcrypt": "^6.0.0",
     "@types/better-sqlite3": "^7.6.13",
     "@types/convict": "^6",
-    "@types/cors": "^2.8.18",
-    "@types/express": "^5.0.2",
+    "@types/cors": "^2.8.19",
+    "@types/express": "^5.0.3",
     "@types/express-actuator": "^1.8.3",
-    "@types/node": "^22.15.18",
-    "@types/supertest": "^2.0.16",
+    "@types/node": "^22.17.0",
+    "@types/supertest": "^6.0.3",
     "@vitest/coverage-v8": "3.2.4",
     "http-proxy-middleware": "^3.0.5",
     "nodemon": "^3.1.10",
-    "supertest": "^6.3.4",
-    "typescript": "^5.8.3",
+    "supertest": "^7.1.4",
+    "typescript": "^5.9.2",
     "vitest": "^3.2.4"
   }
 }

upcoming-release-notes/5497.md

@@ -0,0 +1,6 @@
+---
+category: Maintenance
+authors: [matt-fidd]
+---
+
+Bump dependencies in sync-server package